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Organizations exchange digital certificates 



A first organization sends a second 
organization an authenticated and encrypted 
first message using a digital certificate 
requesting a virtual user id 



The second organization validates the digital 
certificate and decrypts the first message 
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The second organization responds to the first 
message by sending an authenticated and 
encrypted response message comprising an 
authorized virtual user id 



The first organization sends a subsequent 
authenticated and encrypted message requesting to 
modify the authorized virtual user id for a specific 
end user 



Second organization acknowledges the subsequent 
message by sending a different authenticated and 
encrypted message comprising an appropriate 
virtual user id for the specific end user 



The first organization authenticates 




the end user 
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The first organization maps the end user's 
user id to the appropriate virtual user id 



The first organization sends a second 
authenticated and encrypted message 
comprising a session initialization request 



The second organization replies to the 
second message with an authenticated and 
encrypted reply message comprising a 
session id 
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